Approved changes feed: RSS · Atom

cpe:2.3:a:pkp:pkp_web_application_library:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPkp (f7b5daee-50ee-5411-a8f0-bbd00d285ddc)
ProductPkp Web Application Library (555bcef4-ba4c-55c5-b3d3-fecb3b1f8b7f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/pkp/pkp-lib purl2cpe 2026-06-01 10:11:35.490355

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-5899 vulnerable 2026-06-08 06:19:45.050314 Cross-Site Request Forgery (CSRF) in pkp/pkp-lib
LOW (3.5)
Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
Published: 2023-11-01T00:00:41.225Z
Updated: 2025-02-27T20:37:53.080Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5898 vulnerable 2026-06-08 06:19:45.049739 Cross-Site Request Forgery (CSRF) in pkp/pkp-lib
LOW (3.5)
Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
Published: 2023-11-01T00:00:41.808Z
Updated: 2025-02-27T20:37:32.347Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5889 vulnerable 2026-06-08 06:19:45.039721 Insufficient Session Expiration in pkp/pkp-lib
MEDIUM (4.3)
Insufficient Session Expiration in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
Published: 2023-11-01T00:00:18.857Z
Updated: 2024-09-12T19:46:53.033Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.